added basic csrf protection to forms with post method
updated to use new disco is_reserved method